nasa-power-point

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 1.00). One of the provided URLs is a direct link to an executable script (call.mjs) hosted on a third-party domain and is explicitly instructed to be downloaded and run, which is a high-risk pattern for malware distribution.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill explicitly instructs fetching and running remote executable code with "curl -sO https://fittings.sh/skill/call.mjs" (download-and-execute), so https://fittings.sh/skill/call.mjs is a runtime external dependency that would execute remote code.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill includes an explicit payment flow that requires signing authorizations with a crypto wallet: it instructs setting FITTINGS_PRIVATE_KEY, uses a wallet holding USDC on Base, describes signing an authorization for a quoted 402 payment, and references @x402/evm tooling. Those are concrete crypto payment instructions (wallet signing and settlement), which enable direct financial execution.